@liquidium/client 0.7.0 → 0.7.1

package/dist/index.cjs

@@ -47,6 +47,7 @@ var LiquidiumErrorCode = {
   WITHDRAW_TOO_LOW: "WITHDRAW_TOO_LOW",
   REPAYMENT_EXCEEDS_DEBT: "REPAYMENT_EXCEEDS_DEBT",
   INVALID_ADDRESS: "INVALID_ADDRESS",
+  CONTRACT_DESTINATION_UNSUPPORTED: "CONTRACT_DESTINATION_UNSUPPORTED",
   DEPOSIT_ADDRESS_ERROR: "DEPOSIT_ADDRESS_ERROR",
   // Transport
   NETWORK_ERROR: "NETWORK_ERROR",
@@ -1787,6 +1788,11 @@ var HISTORY_ACTIVITIES = `${SDK_API_V2_PATH}/history/activities`;
 var HISTORY_USERS = `${SDK_API_V2_PATH}/history/users`;
 var INFLOW = `${SDK_API_V2_PATH}/inflow`;
 var SIMPLE_LOANS = `${SDK_API_V1_PATH}/instant-loans`;
+function buildEthereumAddressBytecodePath(request) {
+  return `${SDK_API_V2_PATH}/ethereum/addresses/${encodeURIComponent(
+    request.address
+  )}/bytecode`;
+}
 function buildHistoryUserTransactionsPath(profileId, query) {
   const base = `${HISTORY_USERS}/${encodeURIComponent(profileId)}/transactions`;
   const qs = query.toString();
@@ -3343,6 +3349,71 @@ function accountTypeToString(accountType) {
       return `Principal:${accountType.data}`;
   }
 }
+var EMPTY_EVM_BYTECODE = "0x";
+var LAST_ETHEREUM_MAINNET_PRECOMPILE_ADDRESS = 0x11n;
+var CONTRACT_DESTINATION_UNSUPPORTED_MESSAGE = "Contract addresses are not supported for native ETH withdrawals or borrowing";
+var RESERVED_DESTINATION_MESSAGE = "Ethereum outflow destination must not be the zero address or a precompile";
+async function guardEthereumOutflowDestination({
+  address,
+  apiClient,
+  asset,
+  chain,
+  evmReadClient
+}) {
+  if (chain !== Chain.ETH) {
+    return;
+  }
+  const normalizedAddress = viem.getAddress(address);
+  if (BigInt(normalizedAddress) <= LAST_ETHEREUM_MAINNET_PRECOMPILE_ADDRESS) {
+    throw new LiquidiumError(
+      LiquidiumErrorCode.INVALID_ADDRESS,
+      RESERVED_DESTINATION_MESSAGE
+    );
+  }
+  if (asset !== Asset.ETH) {
+    return;
+  }
+  if (evmReadClient?.chain?.id === chains.mainnet.id && evmReadClient.getCode) {
+    let bytecode;
+    try {
+      bytecode = await evmReadClient.getCode({
+        address: normalizedAddress
+      });
+    } catch {
+      return;
+    }
+    if (bytecode === void 0 || bytecode === EMPTY_EVM_BYTECODE) {
+      return;
+    }
+    if (typeof bytecode !== "string" || !/^0x(?:[0-9a-fA-F]{2})*$/.test(bytecode)) {
+      return;
+    }
+    throw new LiquidiumError(
+      LiquidiumErrorCode.CONTRACT_DESTINATION_UNSUPPORTED,
+      CONTRACT_DESTINATION_UNSUPPORTED_MESSAGE
+    );
+  }
+  if (!apiClient) {
+    return;
+  }
+  let response;
+  try {
+    response = await apiClient.get(
+      buildEthereumAddressBytecodePath({ address: normalizedAddress })
+    );
+  } catch {
+    return;
+  }
+  if (!response || typeof response !== "object" || !("hasDeployedBytecode" in response) || typeof response.hasDeployedBytecode !== "boolean") {
+    return;
+  }
+  if (response.hasDeployedBytecode) {
+    throw new LiquidiumError(
+      LiquidiumErrorCode.CONTRACT_DESTINATION_UNSUPPORTED,
+      CONTRACT_DESTINATION_UNSUPPORTED_MESSAGE
+    );
+  }
+}
 
 // src/core/pool-ledger-assets.ts
 function getPoolLedgerAssetRoute(params) {
@@ -4725,6 +4796,13 @@ var LendingModule = class {
       poolChain: selectedPool.chain,
       destinationChain: request.chain
     });
+    await guardEthereumOutflowDestination({
+      address: receiver.address,
+      apiClient: this.apiClient,
+      asset: selectedAsset,
+      chain: request.chain,
+      evmReadClient: this.evmReadClient
+    });
     const lendingActor = createLendingActor(this.canisterContext);
     try {
       const expiryTimestamp = computeExpiryTimestampFromNow();
@@ -4743,7 +4821,9 @@ var LendingModule = class {
       };
       const withdrawSubmissionData = {
         ...withdrawActionData,
-        receiverAccount: receiver.canisterAccount
+        asset: selectedAsset,
+        receiverAccount: receiver.canisterAccount,
+        receiverAddress: receiver.address
       };
       return {
         kind: WalletActionKind.createWithdraw,
@@ -4775,6 +4855,13 @@ var LendingModule = class {
     }
   }
   async submitWithdraw(request, signatureInfo) {
+    await guardEthereumOutflowDestination({
+      address: request.receiverAddress,
+      apiClient: this.apiClient,
+      asset: request.asset,
+      chain: request.chain,
+      evmReadClient: this.evmReadClient
+    });
     try {
       const result = await createLendingActor(this.canisterContext).withdraw(
         principal.Principal.fromText(request.profileId),
@@ -4879,6 +4966,13 @@ var LendingModule = class {
       poolChain: selectedPool.chain,
       destinationChain: request.chain
     });
+    await guardEthereumOutflowDestination({
+      address: receiver.address,
+      apiClient: this.apiClient,
+      asset: selectedAsset,
+      chain: request.chain,
+      evmReadClient: this.evmReadClient
+    });
     await this.guardBorrowSameAssetPolicy({
       profileId: request.profileId,
       pool: selectedPool
@@ -4901,7 +4995,9 @@ var LendingModule = class {
       };
       const borrowSubmissionData = {
         ...borrowActionData,
-        receiverAccount: receiver.canisterAccount
+        asset: selectedAsset,
+        receiverAccount: receiver.canisterAccount,
+        receiverAddress: receiver.address
       };
       return {
         kind: WalletActionKind.createBorrow,
@@ -4930,6 +5026,13 @@ var LendingModule = class {
     }
   }
   async submitBorrow(request, signatureInfo) {
+    await guardEthereumOutflowDestination({
+      address: request.receiverAddress,
+      apiClient: this.apiClient,
+      asset: request.asset,
+      chain: request.chain,
+      evmReadClient: this.evmReadClient
+    });
     try {
       const result = await createLendingActor(
         this.canisterContext